Skip to content

client prints bearer token may cause potential credential leak #1559

@chloeyin

Description

@chloeyin

info!("download task started: {:?}", download);

"proxy HTTP request via dfdaemon by rule config: {:?}",

The code shown above prints all the request headers which may lead to potential credential leak if the header includes the bearer token or basic auth. Even there is ttl for the token, it is still not a good practice to print those values in the info level.

Currently I didn't see a way to sensor the sensetive information as it is hard coded.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions